Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5fd2d5ae-19ec-3bd0-b1fe-5367fd7e1727.roa
File:                     5fd2d5ae-19ec-3bd0-b1fe-5367fd7e1727.roa (raw, json)
Hash identifier:          h3lSnXuMCsz3kG/ApknN/H2dOH5ENN7dd9CTJQE1Agw=
Subject key identifier:   CE:84:01:8A:6B:44:0A:77:BD:F7:6D:85:F3:6A:2C:72:80:A5:0B:08
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584EC7A1D49C9D24303B1CBF8B40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5fd2d5ae-19ec-3bd0-b1fe-5367fd7e1727.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     9009
IP address blocks:        192.253.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d4:9c:9d:24:30:3b:1c:bf:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=dd751772-3fdc-44f7-affc-ee4ee43895aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:eb:5e:ee:47:09:52:7a:52:80:ea:cb:f2:
                    19:f6:7e:d8:f6:05:37:f5:32:22:ab:f6:77:4b:e1:
                    51:56:2b:9e:41:0e:ce:a9:d9:e1:da:5a:7b:7e:b7:
                    b5:f2:e3:a3:e4:9b:9e:ac:32:1f:61:4a:23:be:04:
                    ed:47:5a:26:a6:9c:0f:86:6a:bd:d2:d2:1b:34:41:
                    21:55:7e:b1:33:9c:86:68:c2:db:01:ae:e2:60:21:
                    b5:17:a4:96:67:8e:1e:f8:82:8c:66:61:f1:14:c8:
                    dd:6f:55:fc:6d:b1:be:95:b9:19:12:82:ef:ea:eb:
                    f1:fb:45:70:78:bd:1c:b0:1b:53:49:cd:3b:3a:d2:
                    16:0e:32:13:a6:b6:c9:5f:cf:7b:26:65:7d:bb:31:
                    0d:24:c2:5a:47:dc:2d:d6:37:3a:f1:bc:58:6f:6b:
                    da:45:21:3e:2f:ef:39:c9:66:7d:70:25:31:04:f6:
                    bd:0f:32:e1:d5:19:1e:58:aa:39:33:7b:56:f6:ad:
                    8b:f9:1a:d1:8f:e5:97:ee:5e:d3:34:bc:7a:8e:50:
                    cd:45:fb:a3:e3:6e:86:b0:13:ab:ec:30:db:36:a7:
                    ce:28:a4:9e:ca:0f:26:c9:38:46:bf:3c:d2:d3:ac:
                    26:6c:28:0d:4c:c0:b7:61:d7:4d:79:c8:76:10:3f:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:84:01:8A:6B:44:0A:77:BD:F7:6D:85:F3:6A:2C:72:80:A5:0B:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5fd2d5ae-19ec-3bd0-b1fe-5367fd7e1727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.253.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:b3:b5:26:d4:ee:d6:22:ce:db:9b:33:69:9d:cf:e7:17:
         a1:21:7c:aa:cf:a4:59:34:67:ff:7f:fc:75:99:d0:03:e2:29:
         d1:40:64:c6:8a:59:f3:31:5d:6d:b7:81:1a:73:49:d7:91:fe:
         e7:42:30:89:68:63:10:58:5d:5b:c7:96:90:52:36:69:30:a6:
         9e:ea:ce:3f:21:dc:26:69:75:19:bb:ac:00:ae:8c:df:06:25:
         3a:7b:ef:ab:76:df:12:6d:3e:e8:47:a6:e7:00:7d:88:6b:c7:
         f2:9d:25:c0:45:c8:a9:b0:6e:cf:06:67:82:7f:8b:25:d5:07:
         7f:43:74:38:2e:1a:25:47:80:67:9a:99:f5:b6:c1:b4:44:07:
         27:4b:98:4c:25:ed:03:fe:8c:91:ea:cd:29:c1:7f:52:fa:d7:
         d1:72:de:62:c9:4e:f2:79:85:3b:54:af:e1:7d:e9:6c:36:e5:
         b7:0f:47:53:ba:e6:a6:c9:18:18:ca:79:1b:dc:48:eb:6d:53:
         34:18:0c:fa:6f:28:fb:1c:8a:e3:d4:a3:64:81:14:16:62:0e:
         a6:2e:8a:39:59:3c:39:40:ae:35:4c:23:f5:fe:4f:3a:b2:60:
         2f:13:2e:f9:24:a6:09:78:bc:3d:e9:df:25:51:36:57:2f:93:
         a0:54:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:54:34 2026 by rpki-client